← Orion Pools1 decision on this page
Audit log
Every state-changing event for Orion Pools: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.
- #1publishby system:backfill2026-05-28 03:59:51ZScore: ? → ? (no score change)anchoranchored
- chain
- ●mainnet-betaslot 422,643,169
- sig
64VUQmoh5xPn…HHGWYp2mexplorer ↗- hash
4h6Dc9myp1Qw…Am7jhf7gsha256 → base58
verifying row…full verify ↗canonical bytes (5428 B) ▸
{"actor":"system:backfill","investigation_id":"6f11c615-8578-4c22-aac3-d3accbf12b51","kind":"publish","page_slug":"orion-pools","published_at":"2026-05-28T03:59:51.662Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Orion Pools","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://defillama.com/protocol/orion-pools","type":"other","url":""},{"credibility":3,"name":"https://docs.orion.xyz/products/pools","type":"other","url":""},{"credibility":3,"name":"https://www.binance.com/en/support/announcement/binance-will-support-the-orion-orn-mainnet-swap-and-rebranding-to-lumia-lumia-066ba1773ce4480492b983f8d4764c91","type":"other","url":""},{"credibility":3,"name":"https://iq.wiki/wiki/alexey-koloskov","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/business/2023/02/02/orion-protocol-loses-3m-of-crypto-in-trading-pool-exploit","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/orion-protocol-rekt","type":"other","url":""},{"credibility":3,"name":"https://www.certik.com/resources/blog/4se364ZqArmcLqzqsvXdUR-hunting-orion-the-usd3m-loss-from-a-reentrancy-attack","type":"other","url":""},{"credibility":3,"name":"https://quillaudits.medium.com/decoding-orion-protocols-reentrancy-exploit-quillaudits-396de59449f7","type":"other","url":""},{"credibility":3,"name":"https://cryptodaily.co.uk/2023/02/reentrancy-exploit-siphons-3m-off-orion-protocol","type":"other","url":""},{"credibility":3,"name":"https://blockapex.io/orion-protocol-hack-analysis/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/business/2023/02/02/orion-protocol-loses-3m-of-crypto-in-trading-pool-exploit","type":"other","url":""},{"credibility":3,"name":"https://cryptoslate.com/orion-protocol-suffers-3m-hack-due-to-third-party-vulnerabilities/","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/208394/decentralized-exchange-orion-protocol-hacked-for-3-million","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.certik.com/resources/blog/4se364ZqArmcLqzqsvXdUR-hunting-orion-the-usd3m-loss-from-a-reentrancy-attack","type":"other","url":""},{"credibility":3,"name":"https://www.defisafety.com/app/pqrs/86","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/business/2023/02/02/orion-protocol-loses-3m-of-crypto-in-trading-pool-exploit","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/orion-protocol-rekt","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://defillama.com/protocol/orion-pools","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.binance.com/en/support/announcement/binance-will-support-the-orion-orn-mainnet-swap-and-rebranding-to-lumia-lumia-066ba1773ce4480492b983f8d4764c91","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/binance-will-facilitate-users-swapping-orn-to-lumia-this-october/","type":"other","url":""},{"credibility":3,"name":"https://crypto.com/en/product-news/orn-to-lumia-mainnet-token-swap-and-rebranding","type":"other","url":""}]}],"sources_used":[],"summary":"Orion Pools is the automated market maker (AMM) and liquidity pool component of Orion Protocol, a DeFi liquidity aggregator founded in 2018 by Alexey Koloskov. On February 2, 2023, the protocol suffered a $3 million reentrancy exploit targeting its core exchange contract across Ethereum and BNB Chain, with stolen funds subsequently laundered through Tornado Cash. The project later rebranded to Lumia in late 2024, pivoting from a liquidity aggregator to a Layer 2 blockchain.","timeline":[{"date":"2018-01-01","event":"Orion Protocol founded by Alexey Koloskov and Kal Ali.","source":""},{"date":"2020-07-01","event":"CertiK publishes audit of Orion token sale contracts. Core exchange contracts not included in scope.","source":""},{"date":"2020-07-01","event":"Orion Protocol raises $3.45 million in funding.","source":""},{"date":"2021-05-31","event":"Orion Terminal mainnet launches, including the Orion Pools AMM product.","source":""},{"date":"2023-02-02","event":"Reentrancy exploit drains approximately $3 million from Orion Protocol's exchange contract on Ethereum ($2.84M) and BNB Chain ($191K). Attacker uses a fake token (ATK) and flash loans to manipulate pool accounting.","source":""},{"date":"2023-02-02","event":"CEO Alexey Koloskov states 'all funds are safe and secure' hours after the exploit. Protocol is paused and PeckShield engaged for investigation.","source":""},{"date":"2023-02-03","event":"Attacker begins depositing stolen ETH into Tornado Cash for laundering. Approximately 1,100 ETH laundered; ~$1M ETH remained in attacker address.","source":""},{"date":"2024-02-26","event":"Orion Protocol announces rebranding to Lumia, positioning as a Layer 2 hyper-liquid restake rollup blockchain.","source":""},{"date":"2024-10-15","event":"ORN-to-LUMIA token swap goes live across major exchanges at 1:1 ratio. Binance reopens LUMIA/USDT trading on October 18, 2024.","source":""}]},"v":1}Verify offline (run on your own machine)python -m src.verify_decision 30448230-d861-4dde-b0e2-0502d09f3a7d
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine —
python -m src.verify_decision <event_id>.